This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer File: LG88xdeFlC5gSAk8dDOXOusV_iI.cer (raw, json) Hash identifier: PGvxBTj6SrDJsmJi+6bMvxN4yohtGhllAdsD09+T9Mw= Subject key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B27C5C65779DD36F84A76ECE33919 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25057 IP: 195.216.214.0/23 IP: 2001:67c:214::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:27:c5:c6:57:79:dd:36:f8:4a:76:ec:e3:39:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:53:03:77:6d:5f:13:54:f7:e9:9f:a0:30:8c: a3:3e:72:44:41:8d:a8:9d:9c:1d:c5:60:02:4f:99: cd:95:de:b9:a2:b1:77:2c:ce:11:c7:6c:b3:26:85: 9e:bd:d6:d9:56:07:c9:9b:3b:2c:c1:68:43:32:fc: e1:3e:50:21:88:c4:13:dd:f0:f5:f2:5f:ac:95:26: ad:1d:63:23:d0:b5:2a:f3:5f:39:41:dd:3f:9f:e1: 18:54:65:53:61:90:d8:c3:1a:7e:9e:19:4c:9b:d0: f0:44:3e:aa:fb:e8:18:99:34:b1:3f:1d:33:d4:9e: 9a:2d:7f:e7:38:23:9f:60:11:78:b0:b7:f0:5a:6e: 11:26:f1:88:5e:60:ba:41:d6:07:24:e0:cf:95:04: 6c:85:16:fb:c6:3d:33:fe:46:72:99:60:da:91:74: 18:16:69:ec:1d:d5:fc:51:7d:5b:1e:5b:b3:76:5d: 26:47:08:bd:63:16:e0:32:bd:d4:75:42:9b:07:0f: ff:9f:97:eb:6d:36:12:72:9b:0b:6f:38:58:d7:ed: 83:53:f7:3e:47:a1:ae:7a:48:ff:b5:7b:88:e5:05: bc:bd:21:bf:f2:6f:a5:06:d8:51:1d:20:f4:b9:62: f6:5e:6b:fa:19:d6:d1:91:d3:0f:9c:06:fc:71:70: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.214.0/23 IPv6: 2001:67c:214::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25057 Signature Algorithm: sha256WithRSAEncryption 86:df:c1:95:98:91:af:d5:33:f6:66:ea:df:34:41:e2:90:ab: 6e:84:24:e2:82:c1:3d:2e:af:df:c8:63:9e:a5:82:e6:6b:9f: 23:3b:61:7f:40:ec:fc:ef:bd:d3:9a:97:9b:99:21:12:df:f2: f6:aa:72:c9:f0:9f:06:15:35:de:ac:4a:94:dd:e8:f4:33:19: ba:6f:fb:f9:43:36:85:2a:cd:6a:a8:0c:69:a4:91:e7:7e:63: 77:54:f1:b7:6f:9b:aa:26:d5:68:1f:09:e3:87:00:8b:ba:c8: fa:d5:1e:e3:58:15:2b:ed:77:8d:ac:88:7b:f6:d1:8c:de:a2: 63:cd:29:f9:54:04:d8:ce:9b:8a:fa:c3:37:3d:19:f3:24:56: ec:95:ca:5c:d1:43:95:a7:df:96:3b:06:62:6a:39:85:01:17: 00:ea:46:d6:13:5c:87:06:08:65:05:1f:51:94:e5:37:78:58: 4f:46:4a:d3:ad:05:11:c1:78:26:21:4f:9a:17:6e:1d:37:20: 5d:ba:c3:c2:89:06:f7:73:b0:1d:57:ec:22:6c:13:22:b0:c4: 28:9d:ec:e6:3b:da:31:26:ab:71:b6:72:40:da:3e:c9:14:1c: c9:72:32:71:17:5f:96:a5:9e:74:9e:73:e8:70:13:9f:12:74: a0:60:4f:ae -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt6WyfFxld53Tb4Snbs4zkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzZmM2NjNWQ3ODU5NDJlNjA0ODA5M2M3NDMzOTczYWViMTVmZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFMDd21fE1T36Z+gMIyjPnJEQY2o nZwdxWACT5nNld65orF3LM4Rx2yzJoWevdbZVgfJmzsswWhDMvzhPlAhiMQT3fD1 8l+slSatHWMj0LUq8185Qd0/n+EYVGVTYZDYwxp+nhlMm9DwRD6q++gYmTSxPx0z 1J6aLX/nOCOfYBF4sLfwWm4RJvGIXmC6QdYHJODPlQRshRb7xj0z/kZymWDakXQY FmnsHdX8UX1bHluzdl0mRwi9YxbgMr3UdUKbBw//n5frbTYScpsLbzhY1+2DU/c+ R6Guekj/tXuI5QW8vSG/8m+lBthRHSD0uWL2Xmv6GdbRkdMPnAb8cXD7YwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFCxvPMXXhZQuYEgJPHQzlzrrFf4iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4L2M3OTFk ZC04YjE3LTQ5YzUtYTFlZi02Y2YxY2E1MDhkMWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvYzc5MWRk LThiMTctNDljNS1hMWVmLTZjZjFjYTUwOGQxYS8xL0xHODh4ZGVGbEM1Z1NBazhk RE9YT3VzVl9pSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBw9jWMA8EAgACMAkDBwAgAQZ8AhQwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICYeEwDQYJKoZIhvcNAQELBQADggEBAIbfwZWYka/V M/Zm6t80QeKQq26EJOKCwT0ur9/IY56lguZrnyM7YX9A7PzvvdOal5uZIRLf8vaq csnwnwYVNd6sSpTd6PQzGbpv+/lDNoUqzWqoDGmkked+Y3dU8bdvm6om1WgfCeOH AIu6yPrVHuNYFSvtd42siHv20YzeomPNKflUBNjOm4r6wzc9GfMkVuyVylzRQ5Wn 35Y7BmJqOYUBFwDqRtYTXIcGCGUFH1GU5Td4WE9GStOtBRHBeCYhT5oXbh03IF26 w8KJBvdzsB1X7CJsEyKwxCid7OY72jEmq3G2ckDaPskUHMlyMnEXX5alnnSec+hw E58SdKBgT64= -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:30 2026 by rpki-client